CVE-2023-22741: 
NixOS vulnerability analysis and mitigation

CVE-2023-22741 is a critical vulnerability discovered in Sofia-SIP, an open-source SIP User-Agent library. The vulnerability was disclosed on January 19, 2023, affecting versions <= 1.13.10 of the software. The issue stems from insufficient message length and attributes length checks when handling STUN packets (GitHub Advisory).

The vulnerability exists in the STUN packet parsing functionality where Sofia-SIP lacks both message length and attributes length checks. Specifically, in the stun_parse_attribute() function, after obtaining the attribute's type and length value, the length is used directly to copy from the heap without validating against the message's remaining size. This oversight can lead to a heap buffer overflow condition. The vulnerability has been assigned a Critical severity rating due to its potential impact (GitHub Advisory).

The vulnerability allows attackers to potentially achieve remote code execution (RCE) through heap grooming or other exploitation methods. Since network users control the overflowed length, and the data is written to heap chunks, this creates a significant security risk for systems running affected versions of Sofia-SIP (NVD).

The vulnerability can be exploited by sending specially crafted STUN packets to a system running the affected Sofia-SIP versions. The attacker has control over the overflowed length, making exploitation relatively straightforward for skilled attackers (GitHub Advisory).

The vulnerability has been patched in version 1.13.11 of Sofia-SIP. The fix includes implementing proper checks for STUN message length and attribute length before processing. Users are strongly advised to upgrade to this version or apply the available security updates. For Ubuntu systems, security updates have been released for various versions including Ubuntu 22.04 LTS, 20.04 LTS, and 18.04 LTS (Ubuntu Notice).